E+

Privacy Policy

Last updated: August 26, 2026

BetterEDGAR is a minimal service. This page tells you exactly what we collect, why, and who else sees it. We don't sell data, run ads, or keep usage logs beyond what the product requires.

What we collect

When you sign in

  • Email address — for sign-in and critical account notifications.
  • Display name — provided by you or by your Google account on sign-in.
  • Google profile data — if you use Google OAuth: Google user ID, profile image URL, and email. We don't request drive, contacts, or any other Google scopes.
  • Password and OAuth credentials — passwords are stored only as one-way hashes; social-provider OAuth tokens are encrypted at rest. Credentials are never returned in MCP tool results.

When you use the service

  • IP address — handled by Cloudflare for abuse prevention and rate limiting. Not stored long-term by us.
  • Usage counter — the number of searches, filing retrievals, and MCP calls you've made this month, used to enforce quotas. Resets monthly.
  • Saved feeds and watchlists — when you explicitly save them, we store their names, descriptions, issuer members, feed filters, delivery schedule, destination email, and delivery state so those features work.
  • Agent connections — if you connect BetterEDGAR to ChatGPT, Codex, Claude, or another MCP client, we receive the tool inputs that client sends and return the requested data. We do not receive the rest of your conversation unless the client includes some of it in a tool input. The agent provider processes your conversation under its own privacy terms.
  • OAuth authorization records — for connected MCP clients, we store the consent, client, access, and refresh records needed to honor and revoke the connection. You can revoke access at any time from Account.

When you pay

  • Polar customer ID — a pointer to your account with our payment processor, Polar. We never see your payment card details; Polar handles billing directly.

What we don't collect

  • Ad hoc search history. Ordinary search and MCP query content is processed to return the result but is not saved as a search-history profile or analyzed for ads. Queries you explicitly save as feeds are stored until you edit or delete them.
  • Payment card numbers. Polar handles all payment data.
  • Analytics / tracking cookies. No third-party ad trackers.
  • Any data beyond what the service needs to authenticate you, run your searches, and bill you accordingly.

Service providers and data sources

We rely on these providers and sources to deliver the service:

  • Cloudflare — hosting, DNS, rate limiting, bot protection, email delivery.
  • Polar — subscription billing and payment processing.
  • Google — optional OAuth sign-in; we receive only the scopes listed above.
  • SEC EDGAR — the source of filing data. When you search or fetch a filing, the underlying data comes from the SEC's public servers, with enrichment from us.
  • Yahoo Finance — a source for some quote, market-capitalization, and price movement fields. BetterEDGAR requests market data by ticker or symbol; we do not send Yahoo your BetterEDGAR account identity or credentials.

Cookies and local storage

We use a session cookie to keep you signed in and a theme preference stored in local storage. No advertising cookies, no third-party analytics cookies.

Data retention

  • Account data is kept while your account is active. On account deletion, it is removed within 30 days, except where retention is required by law or by our billing processor (Polar).
  • Usage counters reset monthly; historical monthly totals are not retained.
  • Saved feeds, watchlists, and MCP authorization records are kept while you use the feature or maintain the connection, and are removed when you delete or revoke them, subject to the account-deletion period above.
  • IP logs are short-lived (Cloudflare defaults, typically ≤30 days) and used for abuse prevention only.
  • Billing records are kept by Polar as required by financial regulations.

Your rights

You may:

  • Access or export your account data.
  • Correct inaccuracies.
  • Delete your account.

Email hello@better-edgar.com to exercise any of these. If you're in the EU / UK (GDPR) or California (CCPA), you have specific statutory rights that we honor; the same email reaches us.

Children

BetterEDGAR is not intended for anyone under 18. We do not knowingly collect data from children.

Security

Data is stored on Cloudflare's infrastructure. OAuth tokens are encrypted at rest. No system is perfectly secure — if you suspect a breach of your account, contact us immediately.

International transfers

Our infrastructure is global (Cloudflare). By using the service you consent to your data being processed in regions outside your own, with appropriate safeguards.

Changes to this policy

Material changes will be reflected on this page with an updated "Last updated" date. For substantial changes we'll notify signed-in users by email.

Contact

Privacy questions: hello@better-edgar.com.